WordPress Resume Submissions & Job Postings Plugin - Unrestricted File Upload

Resume Submissions & Job Postings plugin is prone to an unrestricted file upload vulnerability. It causes several problems: uploaded file can be accessed directly by understanding how the plugin renames files, file names are rewritten by the following code, also the plugin creates an MD5 hash of...

Job Manager < 0.7.19 - Multiple XSS

The Job Manager WordPress plugin was affected by a Multiple XSS security vulnerability...

Jobs Portal 3.0 SQL Injection / Cross Site Scripting

Title: ====== Jobs Portal v3.0 NetArtMedia - Multiple Web Vulnerabilites Date: ===== 2012-06-06 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=595 VL-ID: ===== 595 Common Vulnerability Scoring System: ==================================== 8.3 Introduction: =============...

CVE-2011-3620

Apache Qpid 0.12 does not properly verify credentials during the joining of a cluster, which allows remote attackers to obtain access to the messaging functionality and job functionality of a cluster by leveraging knowledge of a cluster-username...

Design/Logic Flaw

Apache Qpid 0.12 does not properly verify credentials during the joining of a cluster, which allows remote attackers to obtain access to the messaging functionality and job functionality of a cluster by leveraging knowledge of a cluster-username...

CVE-2011-3620

Apache Qpid 0.12 does not properly verify credentials during the joining of a cluster, which allows remote attackers to obtain access to the messaging functionality and job functionality of a cluster by leveraging knowledge of a cluster-username...

CVE-2011-3620

Apache Qpid 0.12 does not properly verify credentials during the joining of a cluster, which allows remote attackers to obtain access to the messaging functionality and job functionality of a cluster by leveraging knowledge of a cluster-username...

CVE-2011-3620

CVE-2011-3620 affects Apache Qpid prior to fixed releases; a flaw in the cluster-join credential verification allows remote attackers who know a valid cluster-username to obtain access to messaging and job functionality. Red Hat advisories (RHSA-2012:0528/0529) state the fix changes to the cluste...

CVE-2011-3620

Apache Qpid 0.12 does not properly verify credentials during the joining of a cluster, which allows remote attackers to obtain access to the messaging functionality and job functionality of a cluster by leveraging knowledge of a cluster-username...

CVE-2012-0734

IBM Rational AppScan Enterprise 5.x and 8.x before 8.5.0.1 does not properly import jobs, which allows man-in-the-middle attackers to obtain sensitive information or possibly have unspecified other impact via a crafted job...

CVE-2012-0734

IBM Rational AppScan Enterprise 5.x and 8.x before 8.5.0.1 does not properly import jobs, which allows man-in-the-middle attackers to obtain sensitive information or possibly have unspecified other impact via a crafted job...

PT-2012-2826

Name of the Vulnerable Software and Affected Versions IBM Rational AppScan Enterprise versions 5.x and 8.x before 8.5.0.1 Description The issue allows man-in-the-middle attackers to obtain sensitive information or possibly have unspecified other impact via a crafted job, due to improper job...

PT-2012-1727

Name of the Vulnerable Software and Affected Versions Apache Qpid version 0.12 Description The issue allows remote attackers to obtain access to the messaging functionality and job functionality of a cluster by leveraging knowledge of a cluster-username, due to improper verification of credential...

qpid-cpp: cluster authentication ignores cluster-* settings

Apache Qpid 0.12 does not properly verify credentials during the joining of a cluster, which allows remote attackers to obtain access to the messaging functionality and job functionality of a cluster by leveraging knowledge of a cluster-username...

Advance Ethical Hacking and Cyber Security Boot Camp at Delhi, India

Have you ever wondered how Hackers or Black Hats hack into a computer system ? Our Hacker Boot Camp training session will teach you how this can be done. You will be shown the techniques, tools and methods that the hacker uses. This insight will help you understand how to better protect your IT...

restructureattachments.jsp Triggering off a Restructure job lacks an XSRF token

In restructureattachments.jsp Triggering off a Restructure job does not require a csrf token. To trigger it just send a POST to the page with the following post data: 'action:Restructure'. When fixing this issue, please ensure that the JSP is converted to an action or deleted - we don't want to...

LA Times Profiles Cyber Defense Competition For Teens

The U.S. and other advanced nations face a drastic cyber security skills gap. Attacks from sophisticated and unsophisticated attackers are on the rise, even as more and more companies and government agencies move more of what they do online to Web based services and the cloud. Of course, the skil...

Fedora Update for glpi FEDORA-2012-1519

Check for the Version of glpi OpenVAS Vulnerability Test Fedora Update for glpi FEDORA-2012-1519 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of...

[SECURITY] Fedora 16 Update: condor-7.7.5-0.2.fc16

Condor is a specialized workload management system for compute-intensive jobs. Like other full-featured batch systems, Condor provides a job queueing mechanism, scheduling policy, priority scheme, resource monitoring, and resource management. Users submit their serial or parallel jobs to Condor,...

[SECURITY] Fedora 17 Update: condor-7.7.5-0.2.fc17.2

Condor is a specialized workload management system for compute-intensive jobs. Like other full-featured batch systems, Condor provides a job queueing mechanism, scheduling policy, priority scheme, resource monitoring, and resource management. Users submit their serial or parallel jobs to Condor,...